Configuring Device Security
Defining Access Control
Cisco Small Business SFE/SGE Managed Switches Administration Guide 112
4
• IGMP — Filters packets by IGMP message or message types.
• Source IP Address — Matches the source port IP address to which packets are
addressed to the ACE.
• Dest. IP Address — Matches the destination port IP address to which packets
are addressed to the ACE.
• Traffic Class — Indicates the traffic class to which the packet is matched.
Select either Match DSCP or Match IP:
•
Match DSCP
— Matches the packet to the DSCP tag value.
•
Match IP Precedence
— Matches the packet IP Precedence value to the
ACE. Either the DSCP value or the IP Precedence value is used to match
packets to ACLs. The possible field range is 0-7.
• Action — Indicates the action assigned to the packet matching the ACL.
Packets are forwarded or dropped. In addition, the port can be shut down, a
trap can be sent to the network administrator, or packet is assigned rate
limiting restrictions for forwarding. The options are as follows:
-
Permit
— Forwards packets which meet the ACL criteria.
-
Deny
— Drops packets which meet the ACL criteria.
-
Shutdown
— Drops packet that meets the ACL criteria, and disables the
port to which the packet was addressed. Ports are reactivated from the
Port Management
Page
.
STEP 5 Define the relevant fields,
STEP 6 Click Apply. The IP Based rules are modified, and the device is updated.
Defining IPv6 Based ACLs
The
IPv6 Based ACL Page
page contains information for defining IPv6 Based
ACLs, including defining the ACEs defined for IPv6 Based ACLs.
To Next Page
Loading...
Need help?
General
